socgholish | 373f5768b0f8d285f438db49935294881a52946ba4454ec783803ec3e69139d5 | Triage

Sharing

General

Target

af176d95fcbc4d9683f7750d42593669_JaffaCakes118
Size

218KB
Sample

241129-ftstmaxlfv
MD5

af176d95fcbc4d9683f7750d42593669
SHA1

5c317cf34687d3a487d0a3834f4a973332943cb0
SHA256

373f5768b0f8d285f438db49935294881a52946ba4454ec783803ec3e69139d5
SHA512

d4429be840dd7a5c8a58db9aac966943ff6310dfca245b91b51d0cf240ff485a55c1014d25877181905deb2f533e94da7b8b272cde636851e75293c489aa45f1
SSDEEP

3072:7okclLFodthxh8S0ijgrrGVS2a4CeFMcRRBGgscnRyLBSdKBHCusR60lCqbuXFkp:8kclWyMS27PtX

Score

10^/10

socgholish discovery downloader

Malware Config

Targets

- Target
  
  af176d95fcbc4d9683f7750d42593669_JaffaCakes118
- Size
  
  218KB
- MD5
  
  af176d95fcbc4d9683f7750d42593669
- SHA1
  
  5c317cf34687d3a487d0a3834f4a973332943cb0
- SHA256
  
  373f5768b0f8d285f438db49935294881a52946ba4454ec783803ec3e69139d5
- SHA512
  
  d4429be840dd7a5c8a58db9aac966943ff6310dfca245b91b51d0cf240ff485a55c1014d25877181905deb2f533e94da7b8b272cde636851e75293c489aa45f1
- SSDEEP
  
  3072:7okclLFodthxh8S0ijgrrGVS2a4CeFMcRRBGgscnRyLBSdKBHCusR60lCqbuXFkp:8kclWyMS27PtX
Score

10^/10

socgholish discovery downloader
- SocGholish
  SocGholish is a JavaScript payload that downloads other malware.
  downloader socgholish
- Socgholish family
  socgholish
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

socgholishdiscoverydownloader

behavioral2